Anonymous
2025-12-25 15:03:38
UTC ·
(10 months ago)
4.196.81.3 - - [23/Dec/2025:12:45:47 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 519 "-" "-"
4.196.81.3 - - [23/Dec/2025:12:45:50 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 4294 "-" "-" ...
show more
4.196.81.3 - - [23/Dec/2025:12:45:47 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 519 "-" "-"
4.196.81.3 - - [23/Dec/2025:12:45:50 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 4294 "-" "-"
4.196.81.3 - - [23/Dec/2025:12:45:52 +0100] "GET /wp-includes/rest-api/alfa-rex.php7 HTTP/1.1" 301 491 "-" "-"
...
show less
Bad Web Bot
🇳🇱
homeshowdomain.nl
2025-12-24 23:00:56
UTC ·
(10 months ago)
Auto-ban: 278 malicious requests on 2025-12-23 (e.g., env/backup probes, brute-force, or error bursts).
Hacking
Web App Attack
SSH
🇬🇧
[email protected]
2025-12-24 00:52:01
UTC ·
(10 months ago)
...
Brute-Force
SSH
🇭🇺
DumaNet
2025-12-24 00:00:00
UTC ·
(10 months ago)
Web app attack attempts, scanning for vulnerability.
Date: 2025 Dec 23. 13:44:35
Source IP: 4.196.81.3
Portion of the log(s):
4.196.81.3 - [23/Dec/2025:13:44:33 +0100] "GET /vanta.php HTTP/1.1" 404 153 "-" "-"
4.196.81.3 - [23/Dec/2025:13:44:3 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2025 Dec 23. 13:44:35
Source IP: 4.196.81.3
Portion of the log(s):
4.196.81.3 - [23/Dec/2025:13:44:33 +0100] "GET /vanta.php HTTP/1.1" 404 153 "-" "-"
4.196.81.3 - [23/Dec/2025:13:44:32 +0100] "GET /he.php HTTP/1.1" 404 153 "-" "-"
4.196.81.3 - [23/Dec/2025:13:44:32 +0100] "GET /jp.php HTTP/1.1" 404 153 "-" "-"
4.196.81.3 - [23/Dec/2025:13:44:32 +0100] "GET /admir.php HTTP/1.1" 404 153 "-" "-"
4.196.81.3 - [23/Dec/2025:13:44:32 +0100] "GET /enclas.php HTTP/1.1" 404 153 "-" "-"
4.196.81.3 - [23/Dec/2025:13:44:31 +0100] "GET /13.php HTTP/1.1" 404 153 "-" "-"
4.196.81.3 - [23/Dec/2025:13:44:31 +0100] "GET /12.php HTTP/1.1" 404 153 "-" "-"
4.196.81.3 - [23/Dec/2025:13:44:31 +0100] "GET /11.php HTTP/1.1" 404 153 "-" "-"
4.196.81.3 - [23/Dec/2025:13:44:30 +0100] "GET /files.php HTTP/1.1" 404 153 "-" "-"
4.196.81.3 - [23/Dec/2025:13:44:30 +0100] "GET /pp.php HTTP/1.1" 404 153 "-" "-"
4.196.81.3 - [23/Dec/2025:13:44:30 +0100] "GET /2clas.php
show less
Web App Attack
🇳🇱
homeshowdomain.nl
2025-12-23 23:05:20
UTC ·
(10 months ago)
Auto-ban: >3000 req/min op 2025-12-23
Hacking
Web App Attack
SSH
🇩🇪
ger-stg-sifi1
2025-12-23 14:13:53
UTC ·
(10 months ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇫🇷
Lacrimosa99
2025-12-23 14:10:23
UTC ·
(10 months ago)
4.196.81.3 - - [23/Dec/2025:15:09:48 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4779 "-" "-"
4.196.81.3 - - [23/Dec/2025:15:10:02 +0100] "GET /adminfuns.php HTTP/1.1" 404 267 "-" "-"
4.196.81.3 - - [23/Dec/2025:15:10: ...
show more
4.196.81.3 - - [23/Dec/2025:15:09:48 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 4779 "-" "-"
4.196.81.3 - - [23/Dec/2025:15:10:02 +0100] "GET /adminfuns.php HTTP/1.1" 404 267 "-" "-"
4.196.81.3 - - [23/Dec/2025:15:10:22 +0100] "GET /manager.php?p= HTTP/1.1" 404 267 "-" "-"
...
show less
Web Spam
🇺🇸
agenciahypelab.com.br
2025-12-23 14:09:24
UTC ·
(10 months ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
Anonymous
2025-12-23 13:44:55
UTC ·
(10 months ago)
4.196.81.3 - - [23/Dec/2025:14:44:16 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 437 "-" "-"
4.196.81.3 - - [23/Dec/2025:14:44:16 +0100] "GET /wp-includes/rest-api/alfa-rex.php7 HTTP/1.1" 404 437 "-" "-"
4.196.81.3 - - ...
show more
4.196.81.3 - - [23/Dec/2025:14:44:16 +0100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 437 "-" "-"
4.196.81.3 - - [23/Dec/2025:14:44:16 +0100] "GET /wp-includes/rest-api/alfa-rex.php7 HTTP/1.1" 404 437 "-" "-"
4.196.81.3 - - [23/Dec/2025:14:44:16 +0100] "GET /widgets.php HTTP/1.1" 404 437 "-" "-"
4.196.81.3 - - [23/Dec/2025:14:44:16 +0100] "GET /b.php HTTP/1.1" 404 437 "-" "-"
4.196.81.3 - - [23/Dec/2025:14:44:17 +0100] "GET /nck.php HTTP/1.1" 404 437 "-" "-"
4.196.81.3 - - [23/Dec/2025:14:44:17 +0100] "GET /admin.php HTTP/1.1" 404 437 "-" "-"
4.196.81.3 - - [23/Dec/2025:14:44:17 +0100] "GET /autoload_classmap.php HTTP/1.1" 404 437 "-" "-"
4.196.81.3 - - [23/Dec/2025:14:44:17 +0100] "GET /wp-activate.php HTTP/1.1" 404 437 "-" "-"
4.196.81.3 - - [23/Dec/2025:14:44:18 +0100] "GET /db.php HTTP/1.1" 404 437 "-" "-"
4.196.81.3 - - [23/Dec/2025:14:44:18 +0100] "GET /re.php HTTP/1.1" 404 437 "-" "-"
4.196.81.3 - - [23/Dec/2025:14:44:18 +0100] "GET /bless.php HTTP/1.1
...
show less
DDoS Attack
🇵🇱
lns.bz
2025-12-23 13:33:34
UTC ·
(10 months ago)
Too many 404 requests [BY]
Web App Attack
🇬🇧
Greg Poulson
2025-12-23 13:31:09
UTC ·
(10 months ago)
Our website was hit by this DDOS at a rate of 38 in 5 minutes.
DDoS Attack
Web Spam
Brute-Force
🇬🇧
venus.launch.bz
2025-12-23 13:22:34
UTC ·
(10 months ago)
(wpscan) WordPress probe detected from 4.196.81.3 (AU/Australia/-)
Hacking
🇬🇧
ISPLtd
2025-12-23 13:21:59
UTC ·
(10 months ago)
4.196.81.3 - - [23/Dec/2025:09:21:58 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php
4.196.81.3 - - [23/Dec/2025:09:21:59 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php
...
Hacking
Web App Attack
🇷🇴
INTEQ
2025-12-23 13:19:25
UTC ·
(10 months ago)
Web attack from 4.196.81.3
Web App Attack
Anonymous
2025-12-23 13:16:29
UTC ·
(10 months ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack